Poisoned Pipeline

Poisoned Pipeline / Platforms / Docker / containers

Docker / containers

6 mapped incident(s) that touched this platform or registry.

All platforms Docker / containers (6) npm (135)Git / GitHub (94)Windows software (52)Linux distro / packages (50)PyPI (38)AI coding agents (37)GitHub Actions (33)Developer workstation (33)CI/CD SaaS (25)Installer / update channel (25)VS Code / IDE (23)macOS software (19)Browser extensions (18)CDN / web assets (17)RubyGems (12)Packagist / Composer (11)Certificates / trust stores (11)MCP (10)Go modules (7)crates.io (6)NuGet (6)AUR (5)Kubernetes (5)GitLab (4)Jenkins (4)AWS (3)CircleCI (3)GitLab CI (3)Terraform (3)Azure (2)Maven / Java (2)Azure Pipelines (1)Bitbucket (1)Codeberg (1)Google Cloud (1)pub.dev / Dart (1)TeamCity (1)Travis CI (1)
2026-10

Docker Hub token transfer re-assigned personal access tokens without revoking them

Docker / containersCertificates / trust stores

1 mapped techniques

2026-10

LiteLLM 1.107.0 built from a lookalike repository shipped a startup-hook stealer and hourly loader

PyPIDocker / containersGit / GitHubGitHub ActionsDeveloper workstationLinux distro / packagesmacOS softwareWindows software

12 mapped techniques

2026-05

Polymarket fake-bot and wallet-key npm campaign

npmGit / GitHubDocker / containers

4 mapped techniques

2026-04

elementary-data PyPI and GHCR releases forged

PyPIDocker / containers

2 mapped techniques

2024-12

Kong Ingress image shipped cryptominer

Docker / containers

1 mapped techniques

2021-04

Codecov Breach

GitHub ActionsDocker / containers

12 mapped techniques